8.8

CVE-2026-23230: linux

CVSS: 8.8v3.1HighModified
AliasesUBUNTU-CVE-2026-23230DEBIAN-CVE-2026-23230
Published 18-02-2026Last modified 16-10-2026
Open JSON

Vulnerability summary

CVE-2026-23230 is a high (CVSS 8.8) vulnerability in linux. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 16.8% of scored vulnerabilities.

Overall risk
35/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.26%
0%100%
Low · +0.04 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 29 · Related 24
DLA-4499-1DSA-6141-1DSA-6163-1MGASA-2026-0097MGASA-2026-0098OPENSUSE-SU-2026:10387-1

Timeline

  1. 18-02-2026
    PublishedVulnerability first disclosed.
  2. 16-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: split cached_fid bitfields to avoid shared-byte RMW races is_open, has_lease and on_list are stored in the same bitfield byte in struct cached_fid but are updated in different code paths that may run concurrently. Bitfield assignments generate byte read–modify–write operations (e.g. `orb $mask, addr` on x86_64), so updating one flag can restore stale values of the others. A possible interleaving is: CPU1: load old byte (has_lease=1, on_list=1) CPU2: clear both flags (store 0) CPU1: RMW store (old | IS_OPEN) -> reintroduces cleared bits To avoid this class of races, convert these flags to separate bool fields.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.26%

Chance of exploitation in the next 30 days

Percentile

17%

Versus all other CVEs

30-day change

+0.04 pp

From 0.23% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.26%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu132 products
  • linux< 6.8.0-134.134 | All versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 6.8.0-1060.63 | All versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ ebe98f1447bbccf8228335c62d86af02a0ed23f7, < 569fecc56bfe4df66f05734d67daef887746656b | ≥ ebe98f1447bbccf8228335c62d86af02a0ed23f7, < 4386f6af8aaedd0c5ad6f659b40cadcc8f423828 | ≥ ebe98f1447bbccf8228335c62d86af02a0ed23f7, < 3eaa22d688311c708b73f3c68bc6d0c8e3f0f77a | ≥ ebe98f1447bbccf8228335c62d86af02a0ed23f7, < c4b9edd55987384a1f201d3d07ff71e448d79c1b | ≥ ebe98f1447bbccf8228335c62d86af02a0ed23f7, < 4cfa4c37dcbcfd70866e856200ed8a2894cac578 | ≥ ebe98f1447bbccf8228335c62d86af02a0ed23f7, < ec306600d5ba7148c9dbf8f5a8f1f5c1a044a241 | 6.1
  • linux_kernel≥ 6.1, < 6.1.164 | ≥ 6.2, < 6.6.125 | ≥ 6.7, < 6.12.72 | ≥ 6.13, < 6.18.11 | ≥ 6.19, < 6.19.1
Debian1 product
  • linux< 6.1.164-1 | < 6.12.73-1 | < 6.18.12-1

3 vendors · 135 products

References

22 links
Show all 22 references